Product by SonicWall
SonicWall SonicOS
83 known vulnerabilities in SonicWall SonicOS (SonicWall), 3 of them actively exploited (CISA KEV).
Key figures
83
Vulnerabilities
3
Actively exploited (KEV)
3
Used by ransomware
15
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2024-40766 | SonicWall SonicOS Improper Access Control Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2020-5135 | SonicWall SonicOS Buffer Overflow Vulnerability In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2022-22274 | SonicWall SonicOS: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-12255 | Wind River VxWorks: Buffer Overflow | 9.8 | |
| Critical | CVE-2019-12256 | Wind River VxWorks: Buffer Overflow | 9.8 | |
| Critical | CVE-2024-3596 | IETF RFC: security vulnerability | 9.0 | |
| Critical | CVE-2019-12260 | Oracle Communications Eagle: Buffer Overflow | 9.8 | |
| High | CVE-2019-12257 | Wind River VxWorks: Buffer Overflow | 8.8 | |
| Critical | CVE-2019-12261 | Oracle Communications Eagle: Buffer Overflow | 9.8 | |
| High | CVE-2023-0656 | SonicWall SonicOS: Stack-based Buffer Overflow | 7.5 | |
| High | CVE-2019-12258 | Wind River VxWorks: Session Fixation | 7.5 | |
| High | CVE-2021-3450 | CA certificate check bypass with X509_V_FLAG_X509_STRICT | 7.4 | |
| High | CVE-2019-12259 | Wind River VxWorks: security vulnerability | 7.5 | |
| Medium | CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | |
| Medium | CVE-2019-12265 | Wind River VxWorks: Memory Leak | 5.3 | |
| Medium | CVE-2021-20031 | SonicWall SonicOS: Open Redirect | 6.1 | |
| High | CVE-2019-12263 | Wind River VxWorks: Buffer Overflow | 8.1 | |
| High | CVE-2021-20046 | SonicWall SonicOS: Stack-based Buffer Overflow | 8.8 | |
| High | CVE-2021-20048 | SonicWall SonicOS: Stack-based Buffer Overflow | 8.8 | |
| Critical | CVE-2019-7475 | SonicWall SonicOS: Improper Access Control | 9.8 | |
| Critical | CVE-2025-40600 | SonicWall SonicOS: Use of Externally-Controlled Format String | 9.8 | |
| Critical | CVE-2024-40762 | SonicWall SonicOS: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 9.8 | |
| High | CVE-2020-5138 | SonicWall SonicOS: Heap-based Buffer Overflow | 7.5 | |
| High | CVE-2020-5139 | SonicWall SonicOS: Release of Invalid Pointer or Reference | 7.5 |
News
- Scattered Spider Hackers Plead Guilty in Transport for London Casesans-newsbites-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,
- CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)sans-isc-diary,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 21sans-atrisk,
- Telecommunications Companies Form C2 ISACsans-newsbites-mail,
- SonicWall Releases Fixes for Three SonicOS Vulnerabilitiessans-newsbites-mail,